| Package | Affected versions | Patched versions |
|---|---|---|
| x-cube-azrt-h7rs | = 1.0.0 | |
| x-cube-azrtos-f4 | = 1.1.0 | |
| x-cube-azrtos-f7 | = 1.1.0 | |
| x-cube-azrtos-g0 | = 1.1.0 | |
| x-cube-azrtos-g4 | = 2.0.0 | |
| x-cube-azrtos-h7 | = 3.3.0 | |
| x-cube-azrtos-l4 | = 2.0.0 | |
| x-cube-azrtos-l5 | = 2.0.0 | |
| x-cube-azrtos-wb | = 2.0.0 | |
| x-cube-azrtos-wl | = 2.0.0 |
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Web Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\web\nx_web_http_server.c
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free